During a recent security audit, we were asked if a user would need to use a password to retrieve his/her messages.  We used to use voice authentication, but received complaints from the users.  Our concern is that without voice authentitcation, someone could actually log in as someone else and retrieve their messages.  A verbal password would protect the messages.  Ideally, we would not want to authenticated upon login, but would want password protection to play messages.